This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa
File:                     AS28481.roa (raw, json)
Hash identifier:          mkR7nvWjJ+bJ/k29EiyZFpsCaweL4LuwVfRsKTmeY3M=
Subject key identifier:   11:AF:90:E0:99:51:F9:DA:FE:3D:52:8D:6C:E5:1B:17:AC:5E:83:AD
Certificate issuer:       /CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
Certificate serial:       5149EBCB9CB750BC4641289763E88D8D643982D0
Authority key identifier: 3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa
Signing time:             Mon 08 Dec 2025 08:45:00 +0000
ROA not before:           Mon 08 Dec 2025 08:40:00 +0000
ROA not after:            Mon 07 Dec 2026 08:45:00 +0000
asID:                     28481
IP address blocks:        177.225.216.0/21 maxlen: 21
                          177.241.236.0/22 maxlen: 23
                          189.195.46.0/24 maxlen: 24
                          189.196.168.0/22 maxlen: 24
                          189.199.248.0/23 maxlen: 24
                          200.92.220.0/22 maxlen: 22
                          200.92.232.0/22 maxlen: 22
                          200.94.228.0/23 maxlen: 23
                          200.94.230.0/23 maxlen: 23
                          200.94.232.0/23 maxlen: 23
                          200.94.234.0/23 maxlen: 23
                          200.94.236.0/23 maxlen: 24
                          201.132.132.0/22 maxlen: 23
                          201.132.136.0/21 maxlen: 22
                          201.132.144.0/21 maxlen: 22
                          201.132.156.0/22 maxlen: 23
                          201.164.48.0/21 maxlen: 22
                          2806:260:1012::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl
                          rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.mft
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 15 Dec 2025 08:05:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:49:eb:cb:9c:b7:50:bc:46:41:28:97:63:e8:8d:8d:64:39:82:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B34906CA2BE711E565ADA84356DDADC6B48AA3E
        Validity
            Not Before: Dec  8 08:40:00 2025 GMT
            Not After : Dec  7 08:45:00 2026 GMT
        Subject: CN=11AF90E09951F9DAFE3D528D6CE51B17AC5E83AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e7:32:e7:8c:fb:a0:66:9f:83:25:40:a6:89:
                    6b:80:6a:34:dd:49:37:25:0e:d6:97:c3:45:17:7d:
                    a5:16:23:ed:8d:eb:15:81:4e:ec:f2:8a:55:b2:77:
                    8d:24:26:7b:14:0d:d0:c4:55:d4:b1:3a:2d:4e:bb:
                    5c:8c:1a:d9:ce:2b:ad:a1:43:71:9d:1e:21:da:1f:
                    fb:58:53:94:46:69:06:46:d8:06:62:1d:8e:9d:bd:
                    85:2c:d2:d6:71:cf:5d:df:01:dc:7e:94:20:6f:8f:
                    0d:2a:3b:8a:0b:93:cb:88:cc:80:51:14:08:5b:0e:
                    8c:25:d0:48:95:40:46:da:38:36:8f:c2:19:d8:e7:
                    dd:f0:ff:01:c7:11:5c:62:f0:73:4d:61:06:2d:a4:
                    20:ef:fd:2d:ee:5c:6f:24:43:4e:4f:df:fd:1f:13:
                    e4:86:5d:80:7d:89:3f:c6:49:72:2d:bb:e5:70:a7:
                    5c:ec:b5:3c:b6:0a:e6:13:ff:22:08:67:f6:e8:46:
                    6a:9f:a4:d6:3f:3a:4e:48:b8:ef:3e:01:50:5c:2f:
                    43:05:b1:dd:dc:e3:4f:ea:ab:c6:c9:8f:a0:68:03:
                    fe:84:79:03:90:6f:e9:6f:3e:c8:5b:ae:18:ec:54:
                    12:fe:cc:98:5b:6e:93:61:27:7d:8f:28:6c:9c:11:
                    30:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AF:90:E0:99:51:F9:DA:FE:3D:52:8D:6C:E5:1B:17:AC:5E:83:AD
            X509v3 Authority Key Identifier:
                keyid:3B:34:90:6C:A2:BE:71:1E:56:5A:DA:84:35:6D:DA:DC:6B:48:AA:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3B34906CA2BE711E565ADA84356DDADC6B48AA3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/561568D8C9ADDDCA3CE770397277D5396B63174DB0C7B08B578633BC3267E147/0/AS28481.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.225.216.0/21
                  177.241.236.0/22
                  189.195.46.0/24
                  189.196.168.0/22
                  189.199.248.0/23
                  200.92.220.0/22
                  200.92.232.0/22
                  200.94.228.0-200.94.237.255
                  201.132.132.0-201.132.151.255
                  201.132.156.0/22
                  201.164.48.0/21
                IPv6:
                  2806:260:1012::/47

    Signature Algorithm: sha256WithRSAEncryption
         a3:3e:31:2e:47:14:f7:99:f9:86:40:e6:a5:7f:1c:33:98:67:
         52:47:aa:67:27:f8:50:1b:ed:2f:4b:87:56:cb:b4:a8:53:9d:
         a0:38:7b:8a:23:4d:d3:60:0e:74:6b:e2:a4:d4:6a:f1:3a:8f:
         31:af:ec:5f:7c:d6:eb:2f:d2:4f:8d:58:62:44:58:23:aa:29:
         44:a0:56:93:39:cf:df:e1:47:13:fe:2d:af:5a:54:01:c8:c4:
         98:97:02:bc:5a:84:73:22:ec:65:c9:0b:6a:4b:f7:d5:71:90:
         cb:23:cc:76:0a:fe:26:62:3d:f7:6c:e7:37:55:98:55:0d:9f:
         9c:3a:3c:0d:9a:f4:f7:4f:2d:5d:25:2c:f8:9e:06:6d:75:73:
         92:67:1b:e4:66:36:84:53:c2:37:11:39:05:38:71:99:79:8e:
         b2:f9:21:f7:ce:10:42:a3:af:b7:2b:be:26:d6:78:7c:0b:69:
         9f:47:ac:b6:72:f8:a1:5f:a5:6a:fd:30:28:4c:d6:80:83:27:
         6a:31:57:89:68:23:92:e1:18:02:14:dc:00:2e:f7:06:25:84:
         be:a6:c3:e6:5c:1b:b5:b2:8d:64:9c:90:42:a7:1e:26:d9:0c:
         b8:d1:1e:70:2a:60:9c:f7:3d:5d:ac:69:c7:f4:ef:e0:a5:e6:
         1c:c7:4d:28
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIUUUnry5y3ULxGQSiXY+iNjWQ5gtAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0IzNDkwNkNBMkJFNzExRTU2NUFEQTg0MzU2RERBREM2
QjQ4QUEzRTAeFw0yNTEyMDgwODQwMDBaFw0yNjEyMDcwODQ1MDBaMDMxMTAvBgNV
BAMTKDExQUY5MEUwOTk1MUY5REFGRTNENTI4RDZDRTUxQjE3QUM1RTgzQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV5zLnjPugZp+DJUCmiWuAajTd
STclDtaXw0UXfaUWI+2N6xWBTuzyilWyd40kJnsUDdDEVdSxOi1Ou1yMGtnOK62h
Q3GdHiHaH/tYU5RGaQZG2AZiHY6dvYUs0tZxz13fAdx+lCBvjw0qO4oLk8uIzIBR
FAhbDowl0EiVQEbaODaPwhnY593w/wHHEVxi8HNNYQYtpCDv/S3uXG8kQ05P3/0f
E+SGXYB9iT/GSXItu+Vwp1zstTy2CuYT/yIIZ/boRmqfpNY/Ok5IuO8+AVBcL0MF
sd3c40/qq8bJj6BoA/6EeQOQb+lvPshbrhjsVBL+zJhbbpNhJ32PKGycETCRAgMB
AAGjggL1MIIC8TAdBgNVHQ4EFgQUEa+Q4JlR+dr+PVKNbOUbF6xeg60wHwYDVR0j
BBgwFoAUOzSQbKK+cR5WWtqENW3a3GtIqj4wDgYDVR0PAQH/BAQDAgeAMIGwBgNV
HR8EgagwgaUwgaKggZ+ggZyGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5l
dC9ycGtpL2xhY25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZC
NjMxNzREQjBDN0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvM0IzNDkwNkNBMkJFNzEx
RTU2NUFEQTg0MzU2RERBREM2QjQ4QUEzRS5jcmwwgbkGCCsGAQUFBwEBBIGsMIGp
MIGmBggrBgEFBQcwAoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jw
a2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURFNzA5QUMwRDI1NUNGMjc5QzQ3NzE2
RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQvMC8zQjM0OTA2Q0EyQkU3MTFFNTY1
QURBODQzNTZEREFEQzZCNDhBQTNFLmNlcjCBlwYIKwYBBQUHAQsEgYowgYcwgYQG
CCsGAQUFBzALhnhyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy81NjE1NjhEOEM5QURERENBM0NFNzcwMzk3Mjc3RDUzOTZCNjMxNzREQjBD
N0IwOEI1Nzg2MzNCQzMyNjdFMTQ3LzAvQVMyODQ4MS5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjB8BggrBgEFBQcBBwEB/wRtMGswWAQCAAEwUgMEA7Hh2AME
ArHx7AMEAL3DLgMEAr3EqAMEAb3H+AMEAshc3AMEAshc6DAMAwQCyF7kAwQByF7s
MAwDBALJhIQDBAPJhJADBALJhJwDBAPJpDAwDwQCAAIwCQMHASgGAmAQEjANBgkq
hkiG9w0BAQsFAAOCAQEAoz4xLkcU95n5hkDmpX8cM5hnUkeqZyf4UBvtL0uHVsu0
qFOdoDh7iiNN02AOdGvipNRq8TqPMa/sX3zW6y/ST41YYkRYI6opRKBWkznP3+FH
E/4tr1pUAcjEmJcCvFqEcyLsZckLakv31XGQyyPMdgr+JmI992znN1WYVQ2fnDo8
DZr0908tXSUs+J4GbXVzkmcb5GY2hFPCNxE5BThxmXmOsvkh984QQqOvtyu+JtZ4
fAtpn0estnL4oV+lav0wKEzWgIMnajFXiWgjkuEYAhTcAC73BiWEvqbD5lwbtbKN
ZJyQQqceJtkMuNEecCpgnPc9Xaxpx/Tv4KXmHMdNKA==
-----END CERTIFICATE-----
Generated at Thu Dec 11 13:09:11 2025 by rpki-client